CASE STUDY: VicRoads

The Department of Transport Turns toIvanti for ASD Top 4 CompliancePreventing Risk Exposure

Profile:The Department of Transport (formallyVicRoads (Roads Corporation ofVictoria)) is the road and traffic authority
in the state of Victoria, Australia. The
Department of Transport plans, develops,
and manages the arterial road networkand delivers road safety initiatives andcustomer-focused registration andlicensing services.
Location:
Kew, Australia
Industry:
Public Sector
Website:https://www.vicroads.vic.gov.auSolutions:§ Ivanti® Application Control§ Ivanti Patch for SCCM§ Xtraction

Benefits:§ Simplified whitelistingenablement§ Precise provisioning of admin

privileges§ Streamlined third-party

application patching§ Enabled compliance with ASD

Top 4

www.ivanti.com.au

Victorian residents in Australia rely on the Department of Transport(formally VicRoads) to provide license and registration services, implement
road safety strategies, develop sustainable transport options, and managea road network spanning over 52,000 kilometers.
Employing approximately 4,300 people, the Department of Transport wasat risk. Its agile workforce depends on more than 4,500 devices across 92
sites, but a large number of employees had full admin privileges on devices
due to business support requirements and the applications they utilised. On
top of that, employees were using an array of unapproved applications andthere were no clear controls to manage employee application access.
The Department of Transport needed to quickly minimize its risk exposure
while complying with the Australian Signals Directorate’s (ASD’s) top 4
recommended cybersecurity controls: implementing application whitelisting,patching operating systems and applications, and minimizing adminprivileges.

Application Whitelisting to the Rescue
To safeguard its environment and comply with ASD recommendations, theDepartment of Transport sought a solution that would deliver both
application control, including whitelisting capabilities, as well as privilege
access management to minimize the amount of untrusted software being
executed on corporate client computers. It was also important that theselected solution offer lightweight operation without introducing excessive
additional overhead for the operations teams to manage.
Ivanti Application Control met these requirements. Combining dynamic
whitelisting and privilege management, Application Control prevents
unauthorized code execution without making IT manage extensive lists
manually. It also features a comprehensive central management console.
Additionally, it leaves users unconstrained. On-demand change requests
mean that the Department of Transport’s users can request emergency
privilege elevation as required.
“We’ve created user profiles, so employees get exactly what they require to
do their job. We will elevate apps as needed, but full admin access is now
only provided on an absolute as needed basis,” said Umair Saleem, IT
Team Leader, Department of Transport. “The Ivanti tool has also madewhitelisting so much easier since we can see that all the apps on aparticular machine come from a ‘trusted owner’ and that no one has admin
access where they shouldn’t.”CASE STUDY: VicRoads

Automating Patch Management Madness

Compliant, Productive and Secure

Another headache—and risk—for the Department ofTransport was the extensive process it would take tostay current on third-party application updates. Due tothe time this largely manual task would take, somepatching simply wasn’t happening.

Ivanti was able to solve the Department of Transport’s
critical security and compliance exposures while further
freeing up time for IT staff for other strategic projects.
Now the organization is confident in its compliance with
ASD controls and finds comfort in knowing it has
mitigated risk exposure with greater security confidence.

“We were manually pushing out patching updates, firsttesting on a desktop, then pushing out to othercomputers. Some updates just never happened,” recalls
Saleem.
The Department of Transport solved this update lag withIvanti Patch for SCCM. The solution automates updatesby downloading and pushing out patches to all
devices—saving a considerable amount of staff time.
Not only has this solved patching gaps, but security
exposure from outdated applications has also beenminimized.
“We don’t have to worry anymore that updates arecurrent. Our employees are all able now to be the mostproductive with the latest applications,” said Saleem.

Why Ivanti?
For the Department of Transport, Ivanti delivered theunique combination of products needed to help ensure asecure endpoint enterprise. Ivanti Application Control
provides precise management of application admin
privileges, and Ivanti Patch for SCCM automates thirdparty patching. Together, these solutions provide:§ Whitelisting of trusted applications. Now theDepartment of Transport can guarantee that
only known and trusted applications areexecuted. Using technology that recognizes
an application’s “trusted ownership,” anyunknown or risky executable is prevented
from operating.

§ Granular privilege management. The
Department of Transport is now able to limit
application admin privileges for its employees
without impacting productivity. By creating
specific user profiles, employees now getaccess to exactly what they need, without theover exposure of admin rights.

§ Automated patch management. Patching theDepartment of Transport’s endpoints is now
automated and pain-free. Vulnerabilities arediscovered, assessed, and remediatedautomatically without impacting users or overburdening IT.

www.ivanti.com.au

Since implementing Ivanti, the Department of Transport
has seen the following results:§ Implementation across 4,500 devices wascompleted in under three months, with noslowdown in employee productivity§ All workers now have access to current thirdparty applications to increase productivity§ IT spends only a small fraction of the time itonce did to maintain patches and applications§ The Department of Transport has confidence
that its endpoint estate is secure and current“We have cut overhead and staff time as a result ofIvanti’s automated patch updates, and the interactive
dashboard makes the entire program easier to manage.
Ivanti, in all aspects, has exceeded our expectations,”
Saleem said.
As a result of the successful deployment, theDepartment of Transport is now considering the roll outof Ivanti Application Control for its servers as well. “Ourserver teams are jealous of our results!” he laughed.
Note: The Department of Transport's results are specific
to its total environment/experience, of which Ivanti is apart. Individual results may vary based on eachcustomer’s unique environment.

Learn More
www.ivanti.com.au+61 2 8378 7201
sales@ivanti.com
Copyright © 2019, Ivanti. All rights reserved. IVI-2340 11/19. MM/GK/DL